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^j^rn— KI¥S140te, ^^TMP15^^_b{i32fVh > ^#icTMP16^ST{iL32 
[0054] (d)^{fyW^134 

[0055] 1. 3 s*— y^/Va^tV— ^200 

y-^-y^rt^tv— ^200(3, g|8(^i-J;5^, W^ny°n-fe-/f-201 % /n— K 
7^^202, 7^^3203, A^»P£l$204, ^^$IJ#P?|3205^(^iiff ^yb2 

~;yh206« N -fV^— ^^h20^^tLTV^ 0 
[0056] KT ; V^fP202^.t>V^y §15203 \at, ^^t^—y^W^A^fElg 

^jb\ ^vy/^^sif se2ooa^OTD^^ss2oob«, yt/^yta 

[0057] (1)^— K^V^y§|5202 

K7 2 V^y§P202« > 08^-f-J;5^ fli222Sr|EtSbT*3!9, ^fcBf-^t^y 

^^y221^fEfti-5/c^<Z)^^|i^TV^ 0 Bf^b^^^y221^222^« 
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o 

[0058] (2) $15203 

7W9.&232, S^°n^A233, m^ 0 n^A234^^PW^°n^A235^ 

[0059] «#3^7 i >'y®*jc236^tt, Bf ^-^^^^^^^^T^^^M^^ 

[0060] (a)3^v^/gff ^°n^y^231 

^^xV^^ft ^°n^^,231« N S9^i-«t5^, 1^^=»— KPS201, S202, S 
203^^S204^Ay-Cf#J55c^flT*3i9, me?^^— Kl^fi, ^>"r>y^\t^ 

[0061] ^^3— Kps20i«, yt^nytv- ^200(Dm^^h^^ s y<D^m 

st^l-c. Eft /^^g3ooa— mm -r^t^-r^%%L(D^^~v^^\ ^ 

•So 

[0062] ifo-£-=»— Ki¥S203f3\ IBff ^S*300ad^, ^h20;&.t«ifi 
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^3^^221^bT»^jA£fr^^-r^«(7)^^3— K^-aA/-ev^6o 
[0063] (b)3^^m^°P^A232 

3^^^^°n^A232», |giOfc^-«fc5^ ^4-3— KPS211, S212, 
S213 N S214, S215, S216, S217^XjS21Q^:^/wX^^tlX^ ] 0, ^tih<D 

[0064] 1^3— KpS211fi, yt;^yta- *200OftJM#fl>£>, ^*-KtV** 
f|5202^|B'K$tl,TV^V^tL^^Bf^b=i^^(Dm^Sit#it6r^^ 

^^•3— K3$S212J2, ^^y^203^|B'ft^tbTV^^^n^A233SrP?t^m 

<£<9, ^j^, 3^^a^°n^7A232tS^ 0 n^7^233t^^^bT^ 

[0065] #^3— KpS213fi, ^^SrSJW^Bf^b^vx^rt^^ttSx— ^<^{4 
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[0066] &^r=3— Ki¥S215fci, ifr^~}?mS214frbmT^~Fftmtl£tlfcW&ia-±, 

^3 — Kps 2 1 6 m$ tL/c tu mmR x^m^m £ fwtittrtE i 

[0067] KS¥S217«, ^#7 p n^7A234^J;«?^$ttfeHB©^#^o^S:, 

^y^203cD^^riVx^^236^#iriAt f -^^t-1t#COl%^= I ^-K^ 

[0068] (c)S^°u^^233 

S^°n^A233tt, HHO^i-^^^-^^ — S219^rJ«S220 

[0069] K#S218fi N ^^y^203dS^^5^-^=3>^>^y^H^236d^lfflW_h 

££j£U £/£Ufclfc4fe7*— Vfy 4 - *«rlfcfifefi ^.tWf #^^«|bT, * 
[0070] ifr^=»*- Kf¥S220te > 2fe^0J#Sr#^-=i^- KS¥S2l8^i-i^^i~^^-=i— 

(dMf^:7W^234 

f^n^7A234(i, 011^*TJ;5^^ t£#fMfl?^3.— ^241, 
/V242, ^Dll^v^— /^243, i/a^^i?^.— /PA244, 
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[0071] #^ev^.— /w£, mwffiM&<D&&<D&^—h*&mfr&fr>&xm$t£tiz>='>' 

ife^fifl^J^v^— 7^242, *r*— ya^^Bi^a.— /VA244, P-T^-^3^i/ 
^— /KB245, P—^—> 3 ^^^—/VC246^I^n— 7"— ^3^^-^—71x0247 

43, 7 1 — i ^gy^E-^a- /VB144, n— ; ^gy^a- /I^C145^U $ n— 7^— 

[0072] (^-^f^v^— /W241) 

ll^jflJtP^v^— 7^241 mi2^L^Hl3^-rj;5^> lfo<fr=»*-Ki$S221~ 

[0073] #^3— KS¥S221«, m^»P^^— ^241(DB?dJL5£^7°n^^^, 1^ 

^ny^fi % 64tVhft<7>r^^-t:&So 
^:a— KI£S222te, gtt&o7d&K£#oT, Itl^^^a— /V242W 

xftn-r^t^-rmm^^-v^t^o ^^-vms222^mn^ti^t. ^ 

(D^tr, 8fi»fe^S^Kl , K2, K3 N • • • , K8^^j^^tT,6 0 
[0074] KS¥S223f^, ^~?Ml&mmi-&1$^—VRU^—?M2&mM-t& 

^^3— K£r^i? e f^Mltt, ^it^ofcHt^M(D^±{i(D32^5/b(Z)^— ^ 

tft^=i— Kf£S224te, t 2 — ^Mlirf- ^M2^#ftil^f^JS5FnXOR3riteU ^ 

[0075] TMP1 = M1 XOR M2 

tfo^=i— KpS225te, «MPl^i»Kl^^ot, ^JPl^v^— 7l^243£r 
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tf 0 Z-<Dffi^ 1JUW^^—^243IZ^, TMP2=TMP1 + Kl&Wtti&tl&o 
[0076] 1^^— KI¥S226«, ifTMP2Sr#oi:, n— iXa^^-vU— /^A244£rP? 

o 

TMP3 = Rot2(TMP2) +TMP2 + 1 

T*mu ^(D^^^m^mTMP4^^-r5r^^-r»(D^^3-K^t? 

o 

[0077] TMP4 = Rot4(TMP3) XOR TMP3 
TMP5 = TMP4 XOR Ml 

^=r— KPS229fi, ^^TMP5it£^K2^^#oT, ^P^v 5 ^— ^243£ 

wttiu ^o^^m^«TMP6(^^-r6r^^-t-mm©^^-3-K^ 

tp 0 r<Z^^ JP^v^-— ^243^^19, TMP6=TMP5 + ¥3.fr%\&&ft£> a 
[0078] KI¥S230« N ffTMP6^#oT, n— v-a^^E-v?^— /^A244W 

o 

TMP7 = Rot2(TMP6) +TMP6 + 1 

1%^3— Kl¥S231», ifTMP7?:#o-C, 7 1 — i ^ 3 y^i?a- /^C246£r^ 

o 

[0079] TMP8 = Rot8(TMP7) XOR TMP7 

^^=2— KpS232«, ^!8rrMP8£&3SHK3i:£#o-T\ ^Rlf ^v^— /l^243£r 

PWttiU ^©IS^^m^#rrMP9^^-r6rt^-f-»co^^-3— K«r£ 

tp 0 rcD^^^P^^— A-243^J;I9,TMP9=TMP8 + K3tfS3£ffl£*x5o 
[0080] ifr<fr=i— Ki¥S233fii, ^tTMP9^ot, 7"— Va^a- /WA244£rP¥ 
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TMP10 = Rot2(TMP9) +TMP9 + 1 

KPS234tt, ^mTMP7^.U«^mTMP10Sr#o-C, >3^e 

[0081] TMPll=Rotl6(TMP10) + (TMP10 AND TMP7) 

^^n— KS¥S235«, ^i^TMPlli^^TMPli^^ftil^lf^afPXOR^JfiL, 
^©^^^^r^^TMP12^M-r6ri:^i-itmcD^3-K^£? 0 
TMP12 = TMP11 XOR TMP1 

KS¥S236te, ^mTMP12k&mmK4t&{¥oX, 
SrPWWU ^cD^^^Sr^#:TMPl3^Mi-6r^^i-t»cD^3-K 

£r^tf 0 ^cD^H, jJliW^i?^— ^243^*9, TMP13=TMP12 + K4^Wtti 
[0082] 1%^— KS^S237fi, ScTMP13£#oT, n— ^— v^y^^a- /kA244£r 

pwmu ^o^^m^«TMPi4(^&^-r?>ri^-r»©^^-K^ 

TMP14 = Rot2(TMP13) +TMP13 + 1 

[0083] TMP15 = TMP14 XOR TMP4 

ift^n— KS¥S239«, ^#CTMP15^^#CTMP12^^#ftil^f^lfPXOR^JfeL 
^(D^^^«#CTMP16^M-r6rt^«^®^4-3-K^tP 0 
TMP16=TMP15 XOR TMP12 

KI¥S240«, ^f£TMP15£flt_hfi32tf:yK ^ffcTMP16^:§:T{£32 
t>hi:i-564t>h(Z)»^m^-^:Ci:bT N P^fflU^tf^n^i^tti^-rS^S: 

[0084] Ora^^v^— A-243) 

jjRlf^v^— /P243«, Xtif— b^U 7*— *a + b£g^U T^^a+b 
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ZF^mmWn262%:^^ ^WMWn252^ y<y^^mU263RXim^2 
64^^ Mi»253tt, /<5*?1feMM265, mWcMWcfY £gB266&tK;RT( 
Chinese Remainder Theorem) g|$267£ra tp„ 
[0085] (X)&n'*9**-*RTfifc^r<Dmm. ttm^Xt}f^(D^F 

p (i=l, 2, -, k)Sr, ^ti^etbS^S^tgcfc-t-So Mfctf, p 

i i 

(i=l, 2, k)«, p =3, p =5,p =7,p =13, •••&if<£><£5^ Zrtl^tl 

12 3 4 

/h^v^gjftSfctffcSo 09*.i£, k=17-CfcS 0 ^fc, ^etb^OfSp x P x-x P 

1 2 k 

5o^itlk=17©^n=p Xp X-Xp >2 64 ^6 0 

1 2 k 

[0086] p (i=l, 2, k)(i, i£3E&gB253fc«fc«9i!iM$£*U nf£, 3$&g|$251.Rt^ll 

i 

^P^^-v 5 ^— ^243T1i, mod n©»^^|#J5K^^PJ^W^Z/nZ(D^ 
feP^SilfSrffiV^o g?i % Jeo^feP^JR-t-S^fe-^^Pjtb^-efc^, p. (i=l, 

2, k) ^ML-xm^7ut-r^ 0 

[0087] H^Tci:^, mSrl, 2, ••• bWlfrVftbZ , »Tg m = 1 mod p t)fe5m©fi 

i 

i 

L = LCM(p -1, p -1, — , p -l)^-f-§ 0 LCM(p -1, p -1, — , p 

12k 12k 

-Ufr^p -1, p -1, p -1 (DMc'h'MWIk (Least Common Multiple) £r^^ 0 

1 2 k 

[0088] A^-^a, bn, tth^th, L/2ii)^^^Ali^5o 
(ii)^^251(Dft^c 

^9^W^26in, ntg^»LTl^o 

^Ht?S3£gR262i3\ ATJ^-^a, b&^ttJ&D, ^ttlfrofcA;^-^ bfcl*f 
U 
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g =g a mod n, IkTl 

a 

g =g b mod n&imU Whthtcg RTlg ^S^f|3252-W^-r§ 0 

b a b 

[0089] (iii ) ^Mm&n252(Dmf$. 

a b a b 

g =g Xg mod n^ff»U#btLfcg ^^m^253— m^Ji-S 0 

ab a b ab 

[0090] (iv)&$£&M253(Dffil8 l 

12k 

ab 

gtf&ofcg ^oV>T, g mod p ^*fi~5g mod p (i=l, 2, • • • , k) <DMWC 

ab i ab i 

tt%Cc mod p -l(i=l, 2, k)^ff^-TSo 

i i 

[0091] 0^19, g = g ci mod p (i=l, 2, — , k) fc&Sc mod p -l(i=l, 2, k) 

ab i i i 

Sr^feSo ^^#^hw^c mod p -l(i=l, 2, k) £:CRra267— m^^TS 

i i 

o 

gfm*j-mtf-»g|3266^j;6ci mod pi-l©ffHS#}fefcoVvrra\ it* &&<D£S 
[0092] wSrl, 2, 3, — g w =g mod p ^SwSr^feSo -^©wSrc 

ab i i 

^-f 3 0 £33, #p HiU g 1 , g 2 , -, 

i 

g (pi_2) mod pi^fflfL/c^^-^V^bT^U ^(D^-^/KZ)^^, g 

ab 

mod p t-'BcTZg ^Wrt, tL-Xh^\ 

i 

CRT^267n > mWcMWc$fW^266^ibc mod p -l(i=l, 2, k)£^fr& 

i i 

t>, ^HAPJ^^S(CRT) fc«fctU gtf&ofcc mod p -l(i=l, 2, — , k)d>P>, 

i i 

g mod n<7)g mod n^^f-fSHIfc^f^c mod L^^^?5o o3# % ^SAS'J 

ab 

5k5£Sfc:<fc9, c =c mod p -l(i=l, 2, — , k) £&5c£rJfcfc5 0 

i i 



WO 2005/098795 



23 



PCT/JP2005/005136 



[0093] mWcMWCc mod p -l(i=l, 2, k)/^b, ^SAPJsk^SSrJBV^T, c mod 

i i 

L t^\L=LCM(p -1, p -1, p -l))%>khbZ\a-3:,m^-i-£?K 

1 2 k 

i i 

u =m X (m _1 mod (m /GCD(m m ))) X (c -c )+c &%YW--$~Z> 0 

2 11 2 1, 2 2 1 1 

[0094] rrtN GCD(a ) b,c,"')fi, a,b,c,- • -(DjlA^^lfc (Greatest Common Divisor) 
u =(m X m ) X ((m X m ) 1 mod (m /GCD(m ,m ,m ))) X (c - u )+u 

312 12 3 123 322 

u =(m X m X m ) X ((m X m X m ) 1 mod (m / GCD(m ,m ,m ,m ))) 

4123 123 4 1234 

x(c - u)+u Srf+lfU 

4 3 3 

5 6 k-1 

u =(m X m X m X • * • X m ) X ((m X m X m • • • X m ) 1 

k 1 2 3 k-1 12 3 k-1 

mod (m /GCD(m ,m ,m ,m • • • ,m ))) X (c - u )+u Srff ^i~S 0 

k 1 2 3 4 k-1 k k-1 k-1 

[0095] c=u ftZ> 0 -5UT N cifi&btlZo 

k 

&33* CRT§B267<t5c (i=l, 2, . . . , k)fl>k, 

i 

c mod Pi -l=c SriSfci-c mod L^ff#«^&^ot^», ^#f^F»2 
CRTf|5267fi, ^feiftfcc^P^^v^— /V243cDPWtf1L^(D;7 0 n^A 
[0096] (v^PH^v^r— 7l^243(d iS^P^CQibf^ 

^mMW^262^ MM^S?*.*- 7^243(7) [WHdL^<D:7W7A/^bA^ 
— ^a, b^fltUt) (^^°S301) , SttEtofcA^T**- bfcfcfU g = g* mo 

a 

d n, g =g b mod n^ff^f 5(^^S302— S303) o 

b 

[0097] H^§[$264«, g $:T3g HfUg =g x g mod nSrff^-TS (^tV 

a b ab a b 
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^°S304) o 

#Cfc, m**fSfetf#ffi266tt, g =g d mod p (i=l, 2, k) kftZc mod 

ab i i 

p -l&J&bb(XTlS7'S305), CRTf|5267tt, ^HAPJ^yfeffl (CRT) c 

i i 

= c mod p — 1 (i=l, 2, k) £&5c£rJfci& (^^7°S306) , JfcUl, #^/cc 

i 

^Plf^v^— /^243(DP?t^mb7U(Dy 0 n^A^m^-f5 (;^X7°S307) 0 
[0098] (vi) JpKL^^a— /V2431Z. .tS^nHtOS&f^WtfefiE 

^TT:\ *P»^a.— 7^243^ Ml?—**, bfcfcfU ^-^a + bfctfi^LT^ 

^^33251 ^*3V>T, Xtl?—?*, bfcfcfU g = g a mod n, 

a 

g =g b mod nSrff^U ^SM»S3252^*dV>T, 



b 



g =g Xg mod n^ft^i-5 0 g =g (a+b) mod nStfffifc-T^ttKbtf* 

ab a b ab 

3^^§P253"e(i, gtg a>£>g =g ci mod p (i=l, 2, k) £rtf fc-Tc SrfM? 

ab ab i i 

U *^*§rJBVvT\ c = c mod p c mod LSrlf^^So 
cfig =g c 



c 

ab 



mod n^W'-f"o M^fc, a + b = c mod Li«9, g (a+b " c) =1 mod nb?£&tc#> 
^fe^o Lfc^oT, g (a+W mod n = g°mod n%ffif£i-ft#> , a + b = c mod ((pi 
-1) X (p2-l) X — X (pk-l) )&mtc-r o a<L/2, b<L / /2J:!9a + b<L-Cfe5(D 

+b^rt±i^L-TV^ri:^§ 0 
[0099] 1. 4 Bl<DMfo<D1&Wi<D%}%: 

a b ab a b ab 

a b 

b^mtutfMea, bSr*i?||-t-Srtttfflllt?feSo &£>fc, ^P^^v ? ^-^243« N ^ 

®?ai|Lgp252^S3v> , r, if^lrotfc^ r^^i^M^^p^v^-— /V 

243^p^^^LTV^^t^MJ-r5^t«ffll|-efe5o bt^ot, *n3££fT5 

A7jcDjit(DRiK^t-ett^<, *p»^v^?H^if*^^-e^6r^^^ N mi^n 
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[0101] 2. «M(D 

2. 1 JP^^v^r— /V501(Dtij^ 

SP511ti, ^77^^*^13521, fL^^§|5522S.U?-<^^^523^^, £ 
^#^512^ ^^^^M524/^tK^^fP525^^, M^513tt, ^ 

[0102] 2. 2 &n'*9*—?RTfi&&<Dfem. &mz.AJj7 ! —?<D4kflr 

p, q^*»U n = p 2 Xq^-T6o p, q«> iM^513^J;l9^#£tK nJ2, -=£ 
tl^tK ^§l3511^U«^g^§|3512^j:i9f*^tl,6 0 
[0103] WB^Ja-*- ^50 lT?f3 % mod n<DS2&/^k#J$&*b5PJ^Si&^Z/nZ<Z)3t 
fefei^^M^^V^o ^^m^^jS-rS^fe^^^^cm^fe^g^ 0 mod 

g = g (p ~ 1) mod p 2 bfem-rz> 0 

p 

At}? 1 —?*, b«, P /2J:i9/h$v^^fci-6 0 
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[0104] 2. 3 ^&gB5 11 

£LM££|3522« N nJ^T^SL^Rl, R2&£j3H-S 0 
[0105] -<^?H^523tt, A^-^a, bfc*tU SL&3l^lfP522fcJ;!9^£;fafc& 
t&Rl, R2£rffl^T, 
g =g~(a + nXRl) mod ru 

a 

g =g"(b + nXR2) mod n^tl^l^o 

b 

a b <£> W^£)^fE£rf£V ^tfTV ^ 

[0106] ^mm.nm523\-±, , e ^mmnm^^tatii-^ 

a b 

2. 4 ±^»^512©tf J5fe 

3£^MI^512», /^^!§-W524^^^525^^f#^tLTV^o 
^^§P525tt, ^^»lH5523^^ff-^^:g , g SrgttEtf, ^tflfrofcg 

a b a 

, g fc*frU 

b 

g =g x g mod nSrtHSU tH¥JN«g ^iM513^ffi*t§o 

ab a b ab 

[0107] 2. 5 3^^^§|3513cDftj^ 

iM*»513W:, ^N°7^tS-#ftgP526 N If m^-mt+#fP527^t^iS^^528^^ 

ab ab 

c =g (P_1) mod p 2 £ff-2£U c ^M7^S3528^m^-r5o 

p ab p 

[0108] 3l7cSP528tt,«t1lfc*rt»:ff-|!£|fR527^^c Srgtflfr 1 ^ 

P 

SttBtofcc Srfflv>T, mod p 2 td*3t^Sg fc*J~T5c ©Bltfe^MBfecSrtf- JfU ft 
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[0109] c fc*frUc=(c -l)/(g -1) mod p£bTc&3fc#>5 0 

P P P 

2. 6 Jn^v^r— /V501^J;6^P»(DS]^ 

^°S31lb £11^^522^ nJSUToa^fcRl, R2&£j3cb(^s>7 P S312) , 
g =g"(a + nXRl)mod n N 

a 

g =g'(b + nXR2)mod n£f+^-T5 (^^S313— S314) „ 

b 

[Olio] ^K#IB#^*5V^ IB#r"jtt x ^m^-irm.%^m, MxJi, a~b= 

a b T^5o i^iaot, r a "bj^0r a b j^m^^^Ie^v^^ 

ifctt^ ^jfSP525^ g =g Xg mod n^f+^-T5 O^y^S315) 0 

ab a b 

[oin] m^mi&nmmu527\^c = g (p_1) mod P 2 ^ft^b(^^°s3i6), 

p ab 

5S7ngB528f^ c= (c -l)/(g -1) mod p^LTc^S6 (^^7°S317) % #C 

P P 

^ c ( = a + b) Sr^ffibTn^^n^A^ffl^-rs (^^S318) 0 
[0112] 2. 7 M&*:l?x.<— /V501K£&M^(DW}W<Dm£. 

EJ-R^WC, *P|?L^a— /W501dS, bfc*tU a + b£rttj^bTV^ 

^SP51 lfc*3 V>T, a, bfcfcfU 
g =g~ (a + nXRl)mod n N 

a 

g =g~(b + nXR2)mod n^f+^U 

b 

^S?a*|fB512fc*3V^T,g =g Xg mod n&imir& 0 ~(Dt^,g =g"(a 

ab a b ab 

+ b + nX (R1+R2)) mod n«3Wfc^£fiiKbj5^&5o ifi*^ifelfR513t?f*, * 
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c =g (P_1) =g "(a + b + nX (R1+R2)) mod p 2 

p ab p 

g p =1 mod p 2 J; 19, 

P 

g n =1 mod p 2 "CfeS^ift, 

P 

c =g (a+b) mod p 2 b?£&o 
p p 

[0113] ifi!^ife§P513T?^$P>^mod p 2 (d*3^Sg ^*J"f3c ©Blfife^ftKCcSr^feS 

P P 

c =g c mod p 2 ^»9if:o 0 LMSot, 

P P 

c = a + b mod p"t?fc<9, a<p/2, b<p/2<fc!9, a + b<pT&6/c#>, ^P^^/a 
[0114] 2. 8 Jn||L^3.*-/V501^<tSS6* 

[0115] 2. 9 *r©flfe(l) 

-f&fc^ Mm^5i3(D^^^jf*^J;^^ifHil^fc6m^feS 0 
•Cfctbff, nWiHtM^tfeSp, q£#5^^ffli£^3 0 ^fc, p, q^#fe 
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[0116] 2. 10 ^:0Qftfc(2) 

•Ctt, mod ncDfi^^«^$^^6PJ^M#Z/ / nZ(Z)^^fe^(D^^:^fflV^6 0 g 
^(D^fel^^Jlt-S^^^-^^^cmTfe^g^ 0 mod p m <Dmk&p-VtbZ>%t 
k-TZo g =g (p_1) mod p m ^«i-5 0 



[0117] wmttmY&B527^ m&m525i>>ibflrni&M:g ^nm^n^t^ k 

ab ab 

c =g (p_1) mod p m ^f+lfU tfcfcl, c ^^7C§|5528^m^-r5o 

p ab p 



gtt&ofcc £ffll>T,mod p-f^ltSg fc*f1-5c <0«t1t&^fec£th#U tf 

P p p 

[0118] 3. WM(2) 

#fFlfcitt3fci£L<fftW£;ft/rV^ 0 
[0119] 3. 1 iP^^ev^— /V601(Dtf J$ 

Jtmt^e^a^- A-601 n s MW^i>^~^243kmWkK, Atlf^a, bfc*frU f 
— ^a + b£r^|fU ^a + b^t±i^-r^Vt 0 ^— ^n^7^t?fe«9, 018^ 
«5^> «^611, ^^§P612^t>^«^613^^#^$^T*59, 
§13611^. /^^^M621/5.t5^^^fP622^^., ^^»fP612«, 
^^^^623/^mt Rft*i^3£1fB624«r^, «m^3613«, 
jWlfP625,a7clf|5626&t^«lifc*f8feffJ|L|f|5627Srg-tf 0 
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[0120] 3. 2 #flt/^7<— #RXf$B,1§r<Dl£m. %tXf\Z.Ml 1 ?—9<04kfc 

[0121] ffinmmE<Djjnax& 

y =x 3 +AXx+Bir-TSo rr-C, A N B(3\ ffl R iiE©/^7^- ^tf&So 
G=(x ,y ) mod nfcffifl ft*SE-h©^fc"t"So ^&fc>^ 

g g 

y 2 =x 3 +AXx +B mod nSrififfc^o 

g g g 

A, B, Gtt, ^m^611, £^CggR612, ifi»^|j||fR613^«t!9^$tbSo 
[0122] Kin ftjgftE^^g^Sr^O^GF (p) _h?>*»R ftHcD^^^#j^$tL5^^E(GF 

d^^HS^SrE (GF (q) ) tmWrfZo 

E (GF (p))£E(GF(q))£© 
li:flE(GF(p)) XE(GF(q))"CSt 0 &*S> Z/nZtefle-Cte&C aTefeS/'ctf), 3& 

[0123] E(GF(p))_h(D^tG = (x , y ) mod pt, 

P gP gP 

E(GF(q))_L<D,£G = (x , y ) mod qi^^-T5Z/nZ±©^SR ftj&E (G 

q gq gq 

F(p)) XE(GF(q))(D 

j&G=(x , y ) mod nto^t, 

g g 

x £ 

g 

x mod p = x 23lU* 

g gp 

x mod q = x /c^fe^^U 

g gq 

y «r 

g 

y mod p = y 2SlTJ* 

g gp 

x mod q = x ^^IfT^t^M't^o 

g gq 
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[0124] ^(Dfem^V, 

E(GF(p)) XE(GF(q))±OAG= (x , y ) mod nfc^JC£i-5E(GF(p))_h© 

g g 

MG & 

P 

G = (x , y ) mod p^L^ 

p gp gp 

E(GF(q))_L<D,&G £G = (x , y ) 

q q gq gq 

E (GF (p) ) , E (GF (q) ) £E (GF (p) ) X E (GF (q) ) (D&ftmkfrft-to 
[0125] IX&mGOl fc*3V >T}1, _hfEt&P3ft*ilEf3\ mod pWffinftl«,t4t) 

Anomalous) tSH ftH^J;^ 0 
£b(A mod q-COtf P3ftjfil©te!fifc^q*efcS, "T^^, GF(q)±^T/v 7 

[0126] Z/nZAcDfi 7-/^ryv7^ (Super-Anomalous) iR ft 

Z/nZ±(^tf P3Mc7)f¥teE(GF(p)) XE(GF(q))^<DT\ tSR 

n(=pXq)^5o 
[0127] A^-^a, bfS, p/2J;»9/h$V ^#AS»«o 
3. 3 £g||f|5611©fflM£ 

^SP611tt, /^^ttf|5621^:tJ ? ^7f^#fR622^^f#j5fe^-CV^ 0 
^^^§P62m, m A, B, G^fB'KLTV^o 
[0128] *#7^2f!F|5622f3\ WfflLjnO^n^A^^ AAA-^a, b£r^tt&t>, 
Stt&ofcA^^a, bfcfcfU ^*&^621^^tVO^ru A, B 

G = a*G mod n 

a 

G = b*G mod n^t+^-fSo 

b 

[0129] a*G«, GSraUK ^Rftjg|l©JP||[^<t!9JBb^' ; frT#btbS^C , T?fcSo 

^fc,a*G mod n^a*G<D#lIII,mod nSrlfSUfc&O-CfoSo 
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a b 

3. 4 £mmwn6i2(Dmj& 

[0130] ^9^«HiftSP623tt, n, A, B<HE'|*UTl^o 

a b 

7^t&*ftlf|5623tc:|Elt$ttTV^n, A, BSrfflV^T, G &tfG fcfcfLT, ttRft 

a b 

G = G +G mod n 

ab a b 

ab 

[0131] 3. 5 iM^613(Dfitj3c 

/<9s*#&Wi&625fe, p, A, B, G mod pSrfEHLTV 

iS7cgP626fi, ttRft^P^fl3624^^f+»^G £rStfm9> S«ofcG 

ab ab 

g =g mod p &$mutm^^mwtttmtmM627^&jj-t% 0 

abp ab 

[0132] mwMmmm27a,G mod p^*h-5g (ommnmc mod p^i+if-r 

abp 

§o o^t9 N G = c*G mod p©c^^5 0 c^PWffiWu^W^A^ 

abp 

wwxm3(D88-9i^—^\z.mv<mm^rixv^ 0 tm^mn^xm^mm^ 
tix^ztcib, ^xnmM^m-r&o 

[0133] 3. 6 tinW^^-— 7V60\(DW)W 

•So 
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G = a*G mod n RXl 

a 

G =b*G mod n^rtH^S (^iy^S322— S323) e 

b 

[0134] ^11, m Rft#»»^624tt, 

G =G +G mod n£rff|f-f5<>7V:7 0 S324) 0 

ab a b 

JS7C§P626fi, 
G =G mod p ^1+^1.(^^3325), 

abp ab 

mmimm^Q27n,G mod p^-tsg <Dmikw%kcmm\^(^y-7 

abp 

S326) N Jfcte:, cSr^fflbTn^^n^A^ ^^-^6 (^^°S327) 0 
[0135] 3. 7 ^P^v^-— /V601<DittlfN£IE 

^T^V^T, JPlf^v^— 7^013\ x^J^—^a, bfc*fU a + b^ff|f LTffi 

^lfegP611^*5V>T, a, b^*fU 
G =a*G mod n, 

a 

G =b*G mod nSrfHSU 

b 

^MIf^612^*5V^T, 
Gab = Ga + Gb mod n£ff-^i~5„ 
[0136] Gab=(a + b) *G mod nSriffifc-^irteKbfl^&So 

G =Gab mod p^f+^b, 

abp 

G mod pKM-fZG (DMWtttW£c&7kbb& 0 

abp 

i-&fc>*>,G = c*G mod p^(9^o 0 

abp 

[0137] |ot,c=a+b mod p^Cfc?), a<p/2, b<p/2£t9, 

a + b<pT?fc5fc«>, AP^v^.— 7^601 AJjf— ?atbt(DmWffi^:a + b%: 

3. 8 JP^^ev^L— /V601©S6^: 

JPlf^ev^— 71^601 JUHE*^— /V243S."05, ^^^3.-7^501^111^^, 
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mm^m^hmmm^immm-r^tnmmx^ 
[oi38] zhK, tiD^^— /M3om, ^mmw^6i2iz.^x, m w&mm&ft^x 

[0139] 3. 9 ^com 

mW^^—^601Xn, Z/nZ_L©ff Rffi||<Di¥E(GF(p)) X E (GF (q) ) 
^^^^«§l5-eftV\ ^cD^^-efc5E(GF(p)) ^*5JtSilifc*f^reJBSr 

[0140] ^#-a-(C*3V>-0t., n<D^$^Hf^^Bi^<^v\ 1024E>h 
C^v^-efe^«\ n<D|SM«tfc5p, q£r#5r^ Hitter £fc> p, q 

Z/nZ_h(7)^f HftH©l¥E(GF(p)) XE(GF(q)) ^*5tf» 

mnwtmm^mMKt£% 0 mw^^—^6oixn, vtm&nw&te&g.wtv 
~-Mz&tf%m^m<Djfmz£^x,m n mm^mE (gf ( P ) ) K^n^mmnm. 

[0141] 4. ^comtD^j&m 

^BJSr-hfB^HJfe^tii^^V^TlftKLTt^:^, -LIE© 

•So 
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(D^P^E-v^-— 71-243, 501X15601 m^SV^ 2{|§<D^:ftffiifcaXt5bCD£P|| 

vW^v^— 7V243Xt5501(Z)^Mg|f§l$^ ^rtL^tUO^^ 

[0142] (2)m^mm^^—^241^m^X, Mlf^^^Plf^v^-7^43, 5 
01X«601^f£M-T6^bTV^^ N ffi<7X^Rlf£^-#^T, ^Rlf^v^— 7V£r 

-r^UTl^^ JifEcDRf^fffiJ^i^— 71^141-^ ffiOBf^n^A, «W 
^^7^^^^-r6^^^°n^A^jiffi-r6^bT^j:V\ r<£> 

[0143] (4) 7}P|f^v^.-7V243, 501^601^*31^, PJ^M:§f OJii&S^ tf Rft 

^#^^-7^243X15501 {d*5V^f*, liif^tfot, 
, ^P|^^-7M301^*3l>T«, t*Rft^0^9ff^^To-C, 

[0144] i®s*if, -ttzioib, m^mmxamw^. ^cts r 

wmz/v z(Dmmm^^^xmwtiMW^mm^m^^^ 0 ^com^m^m-r^ 
m&n, mw^^—^5oitmm\^^^x^(Dm(Dm(D^^mi iz&^x 
msk*mmm&m< t^x^ \ 

[0145] (5)^^^^— 71-243 frCjoVvt, gfi, mod p (i=l, 2, k) ^*3V>TJ^^ 
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^(Di§&te, =1 mod p (m >0)^5m fc*frU 

i i i 

L = m Xm X---Xm b~t%> 0 

12 k 

(6) _bfS(D#^g«, W^n^ni?^, ROM, RAM, K^V 

^^^yK ^V^W^ 1 -— — ^ — K, ^yxf£b*fribffij$&thZ>=t>'t°x.-- ? 
-y^rKXlh^o ftjfERAMXtefufE^— K^V^^-^M-te:, nytV^7°D^ 

[0146] (7)_hlEO#^g^«^-r5^^*(D— lffi©^X^ALSI( 
Large Scale Integration: ^kflSj^tl/TV >Si:LT 1 b«tV \ 

MJfc&ifcfe, -?4?v7°v^y-y-^ ROM, RAM/fei^t AjXM J&^ftS^fc^x— ? 

Site, ^cD««j3fe-r5 0 
[0147] (8)_hfaw#^g§r*^i-5tf|^^<D— §PXfi^fix #Sfi^fl£*R]W£l 

itfTlE^v^— W^n^ 0 nirs/1h, ROM, RAM, fck*frb1Mf$&ti2>=<>'}?a. 

[0148] (9)^mmn, ±m^-rjjfexfo&bi.xt>^\ ^fc, riif)©^s^yta 
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8e^<9 Bltg^lE^Mfr, M^«\ ^l^v^V^V^, /^-Kf^^, CD-RO 
M, MO, DVD, DVD-ROM, DVD-RAM, BD (Blu-ray Disc), ^ag#c^!J 

[0149] ^/c, SufE^tV— ^W^AXteitufET^/Wf SMfflff 

[0150] ffffB^P^AXf»fB^V^/Wf -§-§rtff|S|B^fr^|B^bT#^-r5 

o 

[0151] *^p^^tM-rs^-gg, ^^s^ayta-^ypmtt, it m^^)> 
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[3] mmffiGn, mikMWtm^mfem'Vhv , 

M mmmG^mmim(Dffimtez>mwcp , p , -, p (k>i)cD«n=p x P x- 

l 2 k 12 
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x ft, mw&^-rmw^-xm, zn. mwrnxm, z/nzte, m^mtvmmt 

[5] fuffaiMm^^^ MfS«p , p , p 3rfflvvfcz/p z,z/p z, 

12k 12 

z/ P Z(D^^^^itSlft5:^^M^?<^^tp 

k 

[6] m!fS^m^i¥«> SufEH#cp , p , p £fflv^cZ/p Z, z/p Z, 

12k 12 

Z/p Z<^m^i¥^*3ttSilfc^^JSo^J^U ^HAoSfel^S&fflv^ 

k 

[7] ff]fH^G«, 20©itp, q^IES^m^fflV^T^$tL6n = p m Xqt^U Z/n 

ZcDfU&S^fc 1 ^ 

[8] tuiE^^sft, z/p m z<Dmmm-?h% 

[9] itfjfaiE»£mf^ 2-?&5 

[10] tfflBgB^Sfi, T/^7^P3ft^p-efet), 

[12] zbi^ me.m&»&<frmv3i, ii^si^ &m^£%mmmxnmmmt& 
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[i4] mmmm^^v^mwtt, mmmizm^ ^xM&mm&m^fc^xnm^u 
mttt^v^^m^ mmmmmm^'x, nMrnm^^t^xmn 

[15] mm^itxnm^, ^mm^^^tx^m^r/^v^xh^ 

[i6] mmmn^^vT^mnn, mmm^m^^xMmmm^r^^m^iMi, 
xi-tm^u^mu 

mm^^v^^mn, wmmmm^m^^x, n^mm^^;vm^ 
mvxnm^m^Mu ^^^m-^xnm^mm^^^x, mmmxnmm 

mzm^x, mmmxnmmm^hmhn^-Ammmt, M^mmxnMMmm 
[17] sifiEaxtra.— ^^^Att, mm^v^tmm^^y^-t^m^m^mm^ 
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y^b, 

[19] 2mU±-(Dm.Wt&MW~tZ>^\i°^— ^yn^7Atfeot, 

mmm^fti-tzmw^mb, 

^mKxm^n^mmn^mw^m-r-bKx^, mmm&mmm*.!%^-& 
m^m^mb&^fc 

^b&!&mb-t&=i>t°^~¥7°vsf7J>> 0 
[20] ffjfE^Vt 0 ^— ^TW^-M^ ^Vt^-^^^^^^Tfg^fEMf^^fE^tL-C 

^^^#ttir-rSft^iI19^IE*Sc»n^t^^-^yn^A 0 
[21] mJfE^t^-^n^i^ «^^^^tLT^f 

^^^#mir-r^.ffl^iSl9^fE*Sc(7)^^V-^^n^A 0 
[22] 2f@i^ii(Z)»^R*i-S='^tV-^ 0 n^A^fE»bTV ^SnytV-^I^ 
^ «9 "STf g^fE«Mf*-efeo T , 
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